-
Notifications
You must be signed in to change notification settings - Fork 263
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: handle ssl password #4152
Conversation
Add database SSL password support for encrypted private key in order to handle your own certificates.
This is a good feature and PR. Some questions:
|
Yes it can be set only in env var as a first step. Would you like this behavior?
For instance, I believe steampipe will override the |
Yes, I think for the initial implementation, just an env var would be good |
Done ✅ |
thanks! |
We figured out that steampipe does not handle private key protected with a passphrase.
This should fix that by adding sslpassword and ssl_passphrase_command options (and ssl_passphrase_command_supports_reload)
Note
The
server.key
content must contains Proc-Type and DEK-Info headers.It is possible by adding
-traditional
toopenssl
command:openssl genrsa -aes256 -out $STEAMPIPE_INSTALL_DIR/db/14.2.0/data/server.key -passout pass:steampipe -traditional 2048